[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

buffer overrun detected! program:\??\c:\windows\system32\winlogon.exe

Posted on 2009-04-14
7
Medium Priority
?
4,094 Views
Last Modified: 2012-06-22
I get the error in the title

"Buffer overrun detected!

program:\??\c:\windows\system32\winlogon.exe

A buffer overrun has been detected which ahs corrupted the program's internal state. The program cannot safely continue execution and must now be terminated."

when starting windows, just before the ordinary log in screen would appear. I have the option to click okay, and then the system reboots.

I have pulled the drive and run a full chkdsk /r, no problems found. I have run three separate virus scans with no viruses found. Visual inspection makes windows look in tact and healthy. I tried a repair install and it did not change anything. I also tried a reimage that did not change anything. I can't boot into any version of windows (safe mode, directory services repair, etc)

Anybody have any idea about this error, or how to get rid of it?
0
Comment
Question by:zoogelsnof
7 Comments
 
LVL 26

Accepted Solution

by:
souseran earned 2000 total points
ID: 24143445
Did you happen to have SUPERAntiSpyware on the affected drive? Can you run HiJackThis while the drive is slaved to another, and do you find an entry for *.superantispyware\SASWINLO.dll If so, can you rename the SASWINLO.dll file and does that allow you to log on to the drive?
0
 

Author Comment

by:zoogelsnof
ID: 24143866
That worked perfectly! How did you know?
0
 

Author Closing Comment

by:zoogelsnof
ID: 31570204
Perfect!
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 26

Expert Comment

by:souseran
ID: 24143993
Glad to help. :-)

Q. How did you know?

A. LOL. Expert secret.

It appears you're running an older version of SUPERAntiSpyware. Now that the system is working again, you may want to uninstall it. I'd recommend Revo Uninstaller in Advanced Mode and clear out all the associated Files, Folders, and Registry entries. Be sure to check manually that all the old program files are gone. You can download Revo Uninstaller here:

http://www.revouninstaller.com/download/revosetup.exe

Then install the newest version of SUPERAntiSpyware. You can download it here:

http://downloads.superantispyware.com/downloads/SUPERAntiSpyware.exe

Be sure to update the data files.

0
 

Expert Comment

by:boatcomputer
ID: 24684926
Very impressed.
Again Microsoft don't give you a clue to the real problem.
Thanks again
0
 

Expert Comment

by:blxcomputers
ID: 25715974
AWESOME!! Thank you so much. I just wanted to add a comment to say thank you, and to post a work around option.

Here is what I had to do:
The answer posted above is 100% accurate.  I did not have a different drive to slave it from, so I booted using the "ultimate boot disk" CD. I then went into a "DOS" prompt. I naviagted from there to the progra~1\supera~1 directory. I pulled a dir/p and found my file! I then used the standard renaming procedure and renamed it SASWINLO.old  rebooted the machine....bang worked like a charm. Thanks again for your assistance! You saved me HOURS!!
0
 

Expert Comment

by:SocalScout
ID: 26049207
How are you able to run all those diagnostics? I have created boot disks, run Norton Antivirus from the CD,  and I still cannot access the command prompt or anything. It just takes me back to the logon where the above error occurrs.

Thanks


0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
Suggested Courses
Course of the Month19 days, 19 hours left to enroll

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question